Dropped Files | ZeroBOX
Name b02fffaba9e664ff_templog
Submit file
Filepath C:\Users\test22\AppData\Local\Templog
Size 116.0B
Processes 2728 (RegAsm.exe)
Type PNG image data, 1 x 1, 1-bit colormap, non-interlaced
MD5 ec6aae2bb7d8781226ea61adca8f0586
SHA1 d82b3bad240f263c1b887c7c0cc4c2ff0e86dfe3
SHA256 b02fffaba9e664ff7840c82b102d6851ec0bb148cec462cef40999545309e599
CRC32 103CCE5B
ssdeep 3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/09h/rywOhSllln+wbp:6v/lhPfkCDtmywFghK9hm9Wlln+Yp
Yara
  • PNG_Format_Zero - PNG Format
VirusTotal Search for analysis
Name e5c7931e871678ae_tmpFCA2.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpFCA2.tmp
Size 36.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 8e36f9cfbb4e98a1ea4cb31b1dfd18ba
SHA1 271e10b8bb5623e6552f2be568b01ae93b3e5a3a
SHA256 e5c7931e871678ae9bf44ed496a03ba8524a3d7600a44b29a60847ddda90eb86
CRC32 C73EAD8F
ssdeep 24:TLea0RlPbXaFpEO5bNmISHdL6UwcOxvyUU3Z:TYLOpEO5J/KdGU1EyU2Z
Yara None matched
VirusTotal Search for analysis
Name 9a036318d0e09665_r
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\7ZipSfx.000\r
Size 928.5KB
Type ASCII text, with very long lines, with CRLF, CR, LF line terminators
MD5 96b25a04c83944deb0e0341fcbccf67e
SHA1 2e28e79fe7d14a7f29d007a5d0a4bb42a7713f77
SHA256 9a036318d0e096653ab3a283a697f3a290d78a72948e10232cd89c043998df56
CRC32 5B585038
ssdeep 12288:5Cd6Hpwxq2CsP1JXqYU9FxJqoeYdxY46O/GAe:EqoqvkJXg04FGn
Yara
  • NPKI_Zero - File included NPKI
VirusTotal Search for analysis
Name e4cd6eb333a68b0e_vedrei.jar
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\7ZipSfx.000\Vedrei.jar
Size 477.0B
Processes 676 (112233.exe)
Type ASCII text, with CRLF line terminators
MD5 d0d673393a31cd9468ae0fd4bf9cba99
SHA1 c089b4d67b348af91ad0ef734c2c82b10dea4a52
SHA256 e4cd6eb333a68b0ea5ebbc79d0121d5e39e54f7d03599e4b6e31ba689207a2e1
CRC32 B2515AC4
ssdeep 12:5ht8tDWjskess8aTw6y/otMwiiLNtwgfoB0IyvYn:578QShFEo/xLNtwgfg0fvY
Yara None matched
VirusTotal Search for analysis
Name 08d1529b8cc1f174_tmpFCC7.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpFCC7.tmp
Size 80.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 111422631417f9f994c4a35b63e6afa1
SHA1 56b2f28d70cbe6f696e13333bf52792176601ceb
SHA256 08d1529b8cc1f17418b78c2ee832f9066996cc6334045624987fc3d84cf215a7
CRC32 6972A248
ssdeep 96:5Bc7fYLKYZCIdE8XwUWaPdUDg738Hsa/NhuK0l0q8oc5PyWTJereWb3lxzasq9u0:5BPOUNlCTJMb3rEDFAa6Q/
Yara None matched
VirusTotal Search for analysis
Name 824fae3331b95e2f_tmpFC6D.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpFC6D.tmp
Size 40.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 41c19a9e8541fcb934c13c075bf47721
SHA1 648a7622d533d79b9a0bb31dc370134ec3a75ed7
SHA256 824fae3331b95e2f88ca60c87a6c9569086906ec76fc1db8d6dee9adddc4e80c
CRC32 560F7642
ssdeep 48:+35TqYzDGF/8LKBwUf9KfWfkMUEilGc7xBM6vu3f+fmyJqhU:Ulce7mlcwilGc7Ha3f+u
Yara None matched
VirusTotal Search for analysis
Name 5a2c1f7f5a6c6478_Arresti.jar
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\7ZipSfx.000\Arresti.jar
Size 98.0KB
Processes 676 (112233.exe) 2432 (Scegliendo.exe.com)
Type data
MD5 4fcc7fd0fa24067fea13540a126fd395
SHA1 8c09cc2a7e57c6722ad2c03dc76a20c7efeca71e
SHA256 5a2c1f7f5a6c64784447973dfaf21cfe4ccde201d5ec6b9aa66b4d9601bebbe6
CRC32 7DA94403
ssdeep 3072:NMZGuWWycJAQbVlyLeebxZJQe18KXP2gZ3:NyVycuQRm1ieR/26
Yara None matched
VirusTotal Search for analysis
Name 6b89fabc9fc14050_chiamando.jar
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\7ZipSfx.000\Chiamando.jar
Size 872.8KB
Processes 676 (112233.exe)
Type data
MD5 9bd530f22995caf09e6baad1eff4aa97
SHA1 71a928eeaaf562c64629ebc7bed1b92cc4802824
SHA256 6b89fabc9fc1405053301e6e132eaea6fdf5c49bb23fd0c3cf185646124a0d3c
CRC32 B349F18E
ssdeep 12288:4pVWeOV7GtINsegA/hMyyzlcqikvAfcN9b2MyZa31twoPTdFxgawV2M01:4T3E53Myyzl0hMf1tr7Caw8M01
Yara
  • OS_Processor_Check_Zero - OS Processor Check
  • Malicious_Library_Zero - Malicious_Library
VirusTotal Search for analysis
Name 88f9dc0b9a633e43_tmpFD31.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpFD31.tmp
Size 512.0KB
Type SQLite 3.x database, user version 11, last written using SQLite version 3031001
MD5 dd47ebe6866ad2ab59d0caa1de28d09e
SHA1 afdf6eb7a01bb7ef4c9d768b65abbbeae5ba2663
SHA256 88f9dc0b9a633e43c6d2c6fae136e782c15aa38c1601dcff948987f1c2a391c3
CRC32 8DEE9EEA
ssdeep 24:DQHtJl32mNVpP965hKN0MG/lZpNjCKRIaU5BnCMOkC0JCpL3FYay:DQfrbWTTTqtStLm
Yara None matched
VirusTotal Search for analysis